Digital & Technical Consultancy

SOC Architect

Introduction

Our client is one of the most recognised names in digital and technology consultancy — a firm operating at serious scale, with a cyber practice of over 450 specialists in the UK alone, sitting inside a Technology and Transformation business of 7,500 people. You'll be joining a team that's passionate about cyber security, comfortable working at pace, and focused on solving the toughest security challenges facing major organisations today.

The work spans Next-Gen Detection and Response, operating model design, SIEM and SOAR tooling, and everything in between. you'll need deep hands-on experience in security operations architecture, a solid grasp of architecture frameworks like TOGAF, and real-world exposure to SIEM and SOAR platforms.

Working Patterns and location – Hybrid – 2-3 days on site per week

Key responsibilities

• Design and continuously improve Next-Gen Detection and Response capabilities for clients.
• Define architectural blueprints to guide engineers on implementation and tooling.
• Lead threat detection and response strategies, deciding the best course of action against threats.
• Develop processes, governance and ways of working to support the target operating model.
• Collaborate with Engineers and Threat Hunters to analyse dashboard data and drive continuous improvement.
• Lead migration and implementation strategies and plans for security solutions.
• Research emerging tools and approaches to keep detection and response capabilities cutting edge.
• Support clients in evolving their security operating models and refining tooling selection.

Skills & experience

• Strong experience in Security Operations architecture and Next-Gen Detection and Response design.
• Solid understanding of Security Operations Centres and working within or alongside a SOC.
• Experience producing High Level Design and Low Level Design documentation for security solutions.
• Experience working with architecture frameworks, ideally TOGAF.
• Hands-on experience with multiple SIEM and SOAR platforms, preferably Google SecOps.
• Experience with EDR, XDR and NDR tooling such as CrowdStrike, Corelight or Microsoft Defender XDR.
• Experience working across hyperscaler cloud environments.
• Strong written, verbal and presentation skills — comfortable engaging from end users to board level.

The client would also like to see some of the below, but this is not essential:

• Experience working within Agile, DevOps or Kanban delivery environments.
• Professional Cloud Architect Certification from a major hyperscaler provider.
• Experience in a consultancy or client-facing advisory environment.
• Relevant cyber security qualifications such as CISSP, CISM or equivalent.

Additional benefits

• 26 days Annual Leave plus Bank Holidays.
• Pension contribution matched up to 8%.
• Private Medical Insurance.
• Overseas Working Policy – If you have the right to work in another country, can request up to 20 days each year to work remotely.
• Yearly On Target Bonus.
• Season Ticket Loans.
• Paid professional subscription.
• Life Assurance.

Our client is committed to providing a diverse and inclusive workplace and welcomes applications from all backgrounds.

Part‑time opportunities/flexible working is available to suit individual needs.

You will be required to hold a minimum of SC Clearance. If you do not hold an active SC Clearance, please familiarise yourself with the vetting process before applying.